open-agents-ai 0.187.367 → 0.187.369

package/dist/index.js

@@ -544273,77 +544273,84 @@ async function handleSlashCommand(input, ctx3) {
       await showColorMenu(ctx3);
       return "handled";
     }
-    case "apikey": {
-      registerSlashCommand({
-        name: "apikey",
-        description: "Show/copy/rotate API key (show|copy|new)",
-        handler: async ({ arg: arg2 }) => {
-          const action = (arg2 || "show").trim().toLowerCase();
-          let key = process.env["OA_API_KEY"] || "";
-          if (!key) {
-            try {
-              const { homedir: homedir41 } = await import("node:os");
-              const { readFileSync: readFileSync72, existsSync: existsSync91 } = await import("node:fs");
-              const { join: join110 } = await import("node:path");
-              const p2 = join110(homedir41(), ".open-agents", "api.key");
-              if (existsSync91(p2)) key = readFileSync72(p2, "utf8").trim();
-            } catch {
-            }
+    case "apikey":
+    case "key": {
+      const apiKeyHandler = async ({ arg: a2 }) => {
+        const action = (a2 || "show").trim().toLowerCase();
+        let key = process.env["OA_API_KEY"] || "";
+        if (!key) {
+          try {
+            const { homedir: homedir41 } = await import("node:os");
+            const { readFileSync: readFileSync72, existsSync: existsSync91 } = await import("node:fs");
+            const { join: join110 } = await import("node:path");
+            const p2 = join110(homedir41(), ".open-agents", "api.key");
+            if (existsSync91(p2)) key = readFileSync72(p2, "utf8").trim();
+          } catch {
           }
-          if (action === "show") {
-            if (!key) {
-              renderWarning2("No API key set. Use /access any to generate one.");
-              return "handled";
-            }
-            renderInfo2(`API key: ${c3.bold(c3.yellow(key))}`);
-            renderInfo2("Use Authorization: Bearer <key> or paste in the Web UI key modal.");
+        }
+        if (action === "show") {
+          if (!key) {
+            renderWarning2("No API key set. Use /access any to generate one.");
             return "handled";
           }
-          if (action === "copy") {
-            if (!key) {
-              renderWarning2("No API key set. Use /access any to generate one.");
-              return "handled";
-            }
-            try {
-              const { spawnSync: spawnSync6 } = await import("node:child_process");
-              const tryCmd = (cmd2, args) => spawnSync6(cmd2, args, { input: key, encoding: "utf8" });
-              let ok2 = false;
-              if (process.platform === "darwin") {
-                ok2 = tryCmd("pbcopy", []).status === 0;
-              } else if (process.platform === "win32") {
-                ok2 = tryCmd("clip", []).status === 0;
-              } else {
-                ok2 = tryCmd("wl-copy", []).status === 0 || tryCmd("xclip", ["-selection", "clipboard"]).status === 0;
-              }
-              renderInfo2(ok2 ? "Copied API key to clipboard." : "Copy failed — printed above, select to copy.");
-            } catch {
-              renderInfo2("Copy failed — printed above, select to copy.");
-            }
+          renderInfo2(`API key: ${c3.bold(c3.yellow(key))}`);
+          renderInfo2("Use Authorization: Bearer <key> or paste in the Web UI key modal.");
+          return "handled";
+        }
+        if (action === "copy") {
+          if (!key) {
+            renderWarning2("No API key set. Use /access any to generate one.");
             return "handled";
           }
-          if (action === "new") {
-            try {
-              const { randomBytes: randomBytes23 } = await import("node:crypto");
-              const { homedir: homedir41 } = await import("node:os");
-              const { mkdirSync: mkdirSync58, writeFileSync: writeFileSync51 } = await import("node:fs");
-              const { join: join110 } = await import("node:path");
-              const newKey = randomBytes23(16).toString("hex");
-              process.env["OA_API_KEY"] = newKey;
-              const dir = join110(homedir41(), ".open-agents");
-              mkdirSync58(dir, { recursive: true });
-              writeFileSync51(join110(dir, "api.key"), newKey + "\n", "utf8");
-              renderInfo2(`New API key: ${c3.bold(c3.yellow(newKey))}`);
-              renderInfo2("Restart the daemon to apply if needed. Use /access any to restart quickly.");
-            } catch (e2) {
-              renderError2(`Failed to rotate key: ${e2 instanceof Error ? e2.message : String(e2)}`);
+          try {
+            const { spawnSync: spawnSync6 } = await import("node:child_process");
+            const tryCmd = (cmd2, args) => spawnSync6(cmd2, args, { input: key, encoding: "utf8" });
+            let ok2 = false;
+            if (process.platform === "darwin") {
+              ok2 = tryCmd("pbcopy", []).status === 0;
+            } else if (process.platform === "win32") {
+              ok2 = tryCmd("clip", []).status === 0;
+            } else {
+              ok2 = tryCmd("wl-copy", []).status === 0 || tryCmd("xclip", ["-selection", "clipboard"]).status === 0;
             }
-            return "handled";
+            renderInfo2(ok2 ? "Copied API key to clipboard." : "Copy failed — printed above, select to copy.");
+          } catch {
+            renderInfo2("Copy failed — printed above, select to copy.");
+          }
+          return "handled";
+        }
+        if (action === "new") {
+          try {
+            const { randomBytes: randomBytes23 } = await import("node:crypto");
+            const { homedir: homedir41 } = await import("node:os");
+            const { mkdirSync: mkdirSync58, writeFileSync: writeFileSync51 } = await import("node:fs");
+            const { join: join110 } = await import("node:path");
+            const newKey = randomBytes23(16).toString("hex");
+            process.env["OA_API_KEY"] = newKey;
+            const dir = join110(homedir41(), ".open-agents");
+            mkdirSync58(dir, { recursive: true });
+            writeFileSync51(join110(dir, "api.key"), newKey + "\n", "utf8");
+            renderInfo2(`New API key: ${c3.bold(c3.yellow(newKey))}`);
+            renderInfo2("Restart the daemon to apply if needed. Use /access any to restart quickly.");
+          } catch (e2) {
+            renderError2(`Failed to rotate key: ${e2 instanceof Error ? e2.message : String(e2)}`);
           }
-          renderInfo2("Usage: /apikey [show|copy|new]");
           return "handled";
         }
+        renderInfo2("Usage: /apikey [show|copy|new]    aliases: /key");
+        return "handled";
+      };
+      registerSlashCommand({
+        name: "apikey",
+        description: "Show/copy/rotate API key (show|copy|new)",
+        handler: async (opts) => apiKeyHandler({ arg: opts.arg })
       });
-      return "handled";
+      registerSlashCommand({
+        name: "key",
+        description: "Alias for /apikey",
+        handler: async (opts) => apiKeyHandler({ arg: opts.arg })
+      });
+      return apiKeyHandler({ arg });
     }
     case "sessions":
     case "session": {
@@ -551406,16 +551413,17 @@ var init_commands = __esm({
       if (findSlashCommand("access")) return;
       registerSlashCommand({
         name: "access",
-        description: "Show/set OA_ACCESS (loopback|lan|any) and restart daemon",
+        description: "Show/set OA_ACCESS (loopback|lan|any). Live-mutates the daemon; auto-generates API key on 'any'.",
         handler: async ({ arg, hasLocal, ctx: ctx3 }) => {
           const normalize2 = (v) => v.toLowerCase().trim();
+          const normalizeMode = (v) => v === "all" ? "any" : v;
           const curAccess = normalize2(process.env["OA_ACCESS"] ?? "");
           const curHost = process.env["OA_HOST"] ?? "0.0.0.0:11435";
           const allowed = /* @__PURE__ */ new Set(["loopback", "lan", "any"]);
-          const val = normalize2(arg);
+          const val = normalizeMode(normalize2(arg));
           if (!val) {
             renderInfo2(`Access: ${curAccess || "(default)"}  Host: ${curHost}`);
-            renderInfo2("Use /access loopback|lan|any to change (restarts daemon).\n");
+            renderInfo2("Use /access loopback|lan|any to change.\n");
             return "handled";
           }
           if (!allowed.has(val)) {
@@ -551423,16 +551431,90 @@ var init_commands = __esm({
             return "handled";
           }
           process.env["OA_ACCESS"] = val;
+          if (val === "any" && !process.env["OA_API_KEY"]) {
+            try {
+              const { randomBytes: randomBytes23 } = await import("node:crypto");
+              const { homedir: homedir41 } = await import("node:os");
+              const { mkdirSync: mkdirSync58, writeFileSync: writeFileSync51 } = await import("node:fs");
+              const { join: join110 } = await import("node:path");
+              const apiKey = randomBytes23(16).toString("hex");
+              process.env["OA_API_KEY"] = apiKey;
+              const dir = join110(homedir41(), ".open-agents");
+              mkdirSync58(dir, { recursive: true });
+              writeFileSync51(join110(dir, "api.key"), apiKey + "\n", "utf8");
+              renderInfo2(`Generated API key: ${c3.bold(c3.yellow(apiKey))}`);
+              renderInfo2("Use Authorization: Bearer <key> or click 'key' in the Web UI header to paste it.");
+            } catch (e2) {
+              renderWarning2(`Failed to generate API key: ${e2 instanceof Error ? e2.message : String(e2)}`);
+            }
+          }
           if (hasLocal) {
             ctx3.saveLocalSettings({ oaAccess: val });
           } else {
             ctx3.saveSettings({ oaAccess: val });
           }
-          const { stopDaemon: stopDaemon2, ensureDaemon: ensureDaemon2 } = await Promise.resolve().then(() => (init_daemon(), daemon_exports));
-          stopDaemon2();
-          await new Promise((r2) => setTimeout(r2, 800));
+          const port = parseInt(process.env["OA_PORT"] || "11435", 10);
+          try {
+            const { homedir: homedir41 } = await import("node:os");
+            const { mkdirSync: mkdirSync58, writeFileSync: writeFileSync51 } = await import("node:fs");
+            const { join: join110 } = await import("node:path");
+            const dir = join110(homedir41(), ".open-agents");
+            mkdirSync58(dir, { recursive: true });
+            writeFileSync51(join110(dir, "access"), `${val}
+`, "utf8");
+          } catch {
+          }
+          const baseUrl = `http://127.0.0.1:${port}`;
+          const authHeaders = () => {
+            const token = process.env["OA_API_KEY"] || "";
+            return token ? { Authorization: `Bearer ${token}` } : {};
+          };
+          let liveOk = false;
+          try {
+            const resp = await fetch(`${baseUrl}/v1/admin/access`, {
+              method: "POST",
+              headers: { "Content-Type": "application/json", ...authHeaders() },
+              body: JSON.stringify({ mode: val }),
+              signal: AbortSignal.timeout(3e3)
+            });
+            liveOk = resp.ok;
+          } catch {
+          }
+          const readCurrent = async () => {
+            try {
+              const r2 = await fetch(`${baseUrl}/v1/admin/access`, { headers: authHeaders(), signal: AbortSignal.timeout(2e3) });
+              if (!r2.ok) return null;
+              const j = await r2.json();
+              return typeof j.mode === "string" ? j.mode : null;
+            } catch {
+              return null;
+            }
+          };
+          const current = await readCurrent();
+          if (liveOk && current === val) {
+            renderInfo2(`Access policy now '${val}' (live, no restart). Persisted to ~/.open-agents/access.`);
+            return "handled";
+          }
+          renderInfo2(`Live switch did not take effect (daemon reports ${current ?? "unreachable"}). Force-restarting daemon...`);
+          const { forceKillDaemon: forceKillDaemon2, ensureDaemon: ensureDaemon2 } = await Promise.resolve().then(() => (init_daemon(), daemon_exports));
+          const killed = await forceKillDaemon2(port);
+          if (killed > 0) renderInfo2(`Force-killed ${killed} process(es) bound to port ${port}.`);
           const ok2 = await ensureDaemon2();
-          renderInfo2(ok2 ? "Daemon restarted to apply access policy." : "Failed to restart daemon.");
+          if (!ok2) {
+            renderError2("Failed to start a fresh daemon after force-kill.");
+            return "handled";
+          }
+          let finalMode = null;
+          for (let i2 = 0; i2 < 10; i2++) {
+            finalMode = await readCurrent();
+            if (finalMode) break;
+            await new Promise((r2) => setTimeout(r2, 250));
+          }
+          if (finalMode === val) {
+            renderInfo2(`Access policy now '${val}' (daemon restarted, verified).`);
+          } else {
+            renderWarning2(`Daemon restarted but reports mode='${finalMode ?? "unreachable"}'. Expected '${val}'.`);
+          }
           return "handled";
         }
       });
@@ -552609,6 +552691,10 @@ var init_render2 = __esm({
       ["/scheduler menu", "Interactive scheduler menu (toggle/kill)"],
       ["/scheduler list", "List all scheduled tasks and timers"],
       ["/scheduler kill", "Kill schedulers + active runs (with escalation if needed)"],
+      ["/apikey", "Show current API key (for pasting into Web UI / clients)"],
+      ["/apikey copy", "Copy the API key to clipboard"],
+      ["/apikey new", "Rotate to a new API key (regenerate)"],
+      ["/key", "Alias for /apikey"],
       ["/codegraph", "Code-graph snapshot: stats, top files, recent activity"],
       ["/codegraph watch [N]", "Subscribe to live code-graph events for N seconds (default 30)"],
       ["/cg", "Alias for /codegraph"],
@@ -580185,40 +580271,6 @@ async function startInteractive(config, repoPath) {
   const repoRoot = resolve36(repoPath ?? cwd());
   try {
     const { registerSlashCommand: registerSlashCommand2 } = await Promise.resolve().then(() => (init_commands(), commands_exports));
-    registerSlashCommand2({
-      name: "access",
-      description: "Show/set OA_ACCESS (loopback|lan|any) and restart daemon",
-      handler: async ({ arg, hasLocal, ctx: ctx3 }) => {
-        const normalize2 = (v) => v.toLowerCase().trim();
-        const curAccess = normalize2(process.env["OA_ACCESS"] ?? "");
-        const curHost = process.env["OA_HOST"] ?? "0.0.0.0:11435";
-        const allowed = /* @__PURE__ */ new Set(["loopback", "lan", "any"]);
-        const val = normalize2(arg || "");
-        if (!val) {
-          process.stdout.write(`
-  Access: ${curAccess || "(default)"}  Host: ${curHost}
-
-`);
-          return "handled";
-        }
-        if (!allowed.has(val)) {
-          process.stdout.write("\n  Invalid access mode. Use: loopback, lan, or any.\n\n");
-          return "handled";
-        }
-        process.env["OA_ACCESS"] = val;
-        if (hasLocal) {
-          ctx3.saveLocalSettings({ oaAccess: val });
-        } else {
-          ctx3.saveSettings({ oaAccess: val });
-        }
-        const { stopDaemon: stopDaemon2, ensureDaemon: ensureDaemon2 } = await Promise.resolve().then(() => (init_daemon(), daemon_exports));
-        stopDaemon2();
-        await new Promise((r2) => setTimeout(r2, 800));
-        const ok2 = await ensureDaemon2();
-        process.stdout.write(ok2 ? "\n  Daemon restarted to apply access policy.\n\n" : "\n  Failed to restart daemon.\n\n");
-        return "handled";
-      }
-    });
     registerSlashCommand2({
       name: "host",
       description: "Set OA_HOST host:port and restart daemon",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "open-agents-ai",
-  "version": "0.187.367",
+  "version": "0.187.369",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/index.js",